197 static ZBX_THREAD_LOCAL SSL_CTX			*ctx_all		= NULL;  variable
2515 	if (ctx_all == param)  in zbx_ctx_name()
2631 		if (NULL == (ctx_all = SSL_CTX_new(method)))  in zbx_tls_init_child()
2634 		if (1 != SSL_CTX_set_min_proto_version(ctx_all, TLS1_2_VERSION))  in zbx_tls_init_child()
2643 				(NULL != ctx_all && 1 != SSL_CTX_load_verify_locations(ctx_all, CONFIG_TLS_CA_FILE,  in zbx_tls_init_child()
2664 		if (NULL != ctx_all)  in zbx_tls_init_child()
2665 			SSL_CTX_set_verify(ctx_all, SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, NULL);  in zbx_tls_init_child()
2700 		if (NULL != ctx_all)  in zbx_tls_init_child()
2706 			store_all = SSL_CTX_get_cert_store(ctx_all);  in zbx_tls_init_child()
2749 		if (1 != SSL_CTX_use_certificate_chain_file(ctx_cert, CONFIG_TLS_CERT_FILE) || (NULL != ctx_all &&  in zbx_tls_init_child()
2750 				1 != SSL_CTX_use_certificate_chain_file(ctx_all, CONFIG_TLS_CERT_FILE)))  in zbx_tls_init_child()
2770 				(NULL != ctx_all && 1 != SSL_CTX_use_PrivateKey_file(ctx_all, CONFIG_TLS_KEY_FILE,  in zbx_tls_init_child()
2974 	if (NULL != ctx_all)  in zbx_tls_init_child()
2978 		SSL_CTX_set_info_callback(ctx_all, zbx_openssl_info_cb);  in zbx_tls_init_child()
2981 			SSL_CTX_set_psk_server_callback(ctx_all, zbx_psk_server_cb);  in zbx_tls_init_child()
2983 		SSL_CTX_set_mode(ctx_all, SSL_MODE_AUTO_RETRY);  in zbx_tls_init_child()
2984 		SSL_CTX_set_options(ctx_all, SSL_OP_CIPHER_SERVER_PREFERENCE | SSL_OP_NO_TICKET);  in zbx_tls_init_child()
2985 		SSL_CTX_clear_options(ctx_all, SSL_OP_LEGACY_SERVER_CONNECT);  in zbx_tls_init_child()
2986 		SSL_CTX_set_session_cache_mode(ctx_all, SSL_SESS_CACHE_OFF);  in zbx_tls_init_child()
2988 		if (SUCCEED == zbx_set_ecdhe_parameters(ctx_all))  in zbx_tls_init_child()
2997 			if (1 != SSL_CTX_set_ciphersuites(ctx_all, CONFIG_TLS_CIPHER_ALL13))  in zbx_tls_init_child()
3014 			if (1 != SSL_CTX_set_cipher_list(ctx_all, CONFIG_TLS_CIPHER_ALL))  in zbx_tls_init_child()
3021 		else if (1 != SSL_CTX_set_cipher_list(ctx_all, ciphers))  in zbx_tls_init_child()
3027 		zbx_log_ciphersuites(__func__, "certificate and PSK", ctx_all);  in zbx_tls_init_child()
3054 	if (NULL == ctx_all)  in zbx_tls_init_child()
3190 	if (NULL != ctx_all)  in zbx_tls_free()
3191 		SSL_CTX_free(ctx_all);  in zbx_tls_free()
4056 		if (NULL != ctx_all)  in zbx_tls_accept()
4058 			if (NULL == (s->tls_ctx->ctx = SSL_new(ctx_all)))  in zbx_tls_accept()